Could VeriSign be banned from new TLDs?

Governments have proposed stricter background checks on new top-level domain operators that could capture some of the industry’s biggest players.
Top-five registrar Network Solutions and .com manager VeriSign may have reason to be concerned by the latest batch of Governmental Advisory Committee recommendations.
The GAC wants checks on new gTLD applicants expanded to include not only criminal convictions and intellectual property violations but also government orders related to consumer fraud.
The GAC advised ICANN, with my emphasis:

The GAC believes that the categories of law violations that will be considered in the background screening process must be broadened to include court or administrative orders for consumer protection law violations. If an applicant has been subject to a civil court or administrative order for defrauding consumers, it should not be permitted to operate a new gTLD.

This is not new – the GAC has proposed similar provisions before – but it seems to be the only GAC advice on applicant screening that ICANN has not yet adopted, and the GAC is still pushing for it.
Why could VeriSign and NetSol be worried by this?
One reason that springs to mind is that, back in 2003, NetSol was officially barred by the US Federal Trade Commission from the practice known as “domain slamming”.
Domain slamming, you may recall, was one of the dirtiest “marketing” tactics employed by the registrar sector during the early days of competition.
Registrars would send fake invoices with titles such as “Renewal and Transfer Notice” to the addresses of their rivals’ customers, mined from Whois data.
The letters were basically tricks designed to persuade customers ignorant of the domain name lifecycle to transfer their business to the slamming registrar.
Respectable registrars have nothing to do with such practices nowadays, but a decade ago companies including NetSol and Register.com, the two largest registrars at the time, were all over it.
At the time NetSol was carrying out its slamming campaign, it was part of VeriSign. It was spun off into a separate company earlier in 2003, before the FTC entered its order.
The order (pdf) was approved by a DC judge as part of a deal that settled an FTC civil lawsuit, alleging deceptive practices, against the company.
NetSol was not fined and did not admit liability, but it did agree to be permanently enjoined from any further slamming, and had to file compliance notices for some time afterward.
It seems plausible that this could fall into the definition of a “civil court or administrative order for defrauding consumers” that the GAC wants added to the Applicant Guidebook’s background checks.
Whether the GAC’s advice, if implemented by ICANN, would capture NetSol and/or VeriSign is of course a matter of pure speculation at the moment.
I think it’s highly unlikely that ICANN would put something in the Guidebook that banned VeriSign, its single largest source of funding (over a quarter of its revenue) from the new gTLD program.
Sadly, I think I may also be unfairly singling out these two firms here – I’d be surprised if they’re the only companies in the domain name industry with this kind of black mark against their names.
Existing background checks in the Applicant Guidebook governing cybersquatting are already thought to pose potential problems for registrars including eNom and Go Daddy.
UPDATE: It looks like NSI and VeriSign are probably safe.

Experts say piracy law will break the internet

Five of the world’s leading DNS experts have come together to draft a report slamming America’s proposed PROTECT IP Act, comparing it to the Great Firewall of China.
In a technical analysis of the bill’s provisions, the authors conclude that it threatens to weaken the security and stability of the internet, putting it at risk of fragmentation.
The bill (pdf), proposed by Senator Leahy, would force DNS server operators, such as ISPs, to intercept and redirect traffic destined for domains identified as hosting pirated content.
The new paper (pdf) says this behavior is easily circumvented, incompatible with DNS security, and would cause more problems than it solves.
The paper was written by: Steve Crocker, Shinkuro; David Dagon, Georgia Tech; Dan Kaminsky, DKH; Danny McPherson, Verisign and Paul Vixie of the Internet Systems Consortium.
These are some of the brightest guys in the DNS business. Three sit on ICANN’s Security and Stability Advisory Committee and Crocker is vice-chairman of ICANN’s board of directors.
One of their major concerns is that PROTECT IP’s filtering would be “fundamentally incompatible” with DNSSEC, the new security protocol that has been strongly embraced by the US government.
The authors note that any attempts to redirect domains at the DNS level would be interpreted as precisely the kind of man-in-the-middle attack that DNSSEC was designed to prevent.
They also point out that working around these filters would be easy – changing user DNS server settings to an overseas provider would be a trivial matter.

PROTECT IP’s DNS filtering will be evaded through trivial and often automated changes through easily accessible and installed software plugins. Given this strong potential for evasion, the long-term benefits of using mandated DNS filtering to combat infringement seem modest at best.

If bootleggers start using dodgy DNS servers in order to find file-sharing sites, they put themselves at risk of other types of criminal activity, the paper warns.
If piracy sites start running their own DNS boxes and end users start subscribing to them, what’s to stop them pharming users by capturing their bank or Paypal traffic, for example?
The paper also expresses concern that a US move to legitimize filtering could cause other nations to follow suit, fragmenting the mostly universal internet.

If the Internet moves towards a world in which every country is picking and choosing which domains to resolve and which to filter, the ability of American technology innovators to offer products and services around the world will decrease.

This, incidentally, is pretty much the same argument used to push for the rejection of the .xxx top-level domain (which Crocker voted for).

Can ICANN make a trademark deal with the GAC?

The ICANN board and its Governmental Advisory Committee have yet to reach agreement on how to protect trademarks in new top-level domains, following their Friday teleconference.
The two parties are still stuck on at least four trademark protect issues, according to sources familiar with the talks, and the GAC is due to provide updated written advice to ICANN tomorrow.
Two of the areas still outstanding were previously marked “1A” in ICANN documents, meaning ICANN’s board believed the GAC’s concerns had already been resolved.
Trademark Claims
Details of the proposed Trademark Clearinghouse database and the related Trademark Claims service are still the subject of debate.
Trademark Claims provides an alert to a trademark holder if somebody tries to register their trademark in a new gTLD. The would-be registrant also gets a warning that they may be infringing rights.
As the Applicant Guidebook stands today, new gTLD managers will have to operate the service for the first 60 days of general availability, but the IP lobby and the GAC believe it should be permanent.
The sticking point for ICANN, as I understand it, is that there’s already a commercial market for brand protection services that have some overlap with Trademark Claims.
Several companies, such as MarkMonitor, CSC and Melbourne IT, offer services that alert customers when somebody appears to infringe their brand in a domain name.
If Trademark Claims ever made it into com and other gTLDs, it could effectively monopolize the brand watch services market. The Clearinghouse(s) will be ICANN contractors, after all.
Remember what happened when VeriSign announced its Wait List Service, which promised to effectively take over the existing domain back-order services market? It wasn’t pleasant.
Proof of Use
ICANN has already dropped its requirement for “substantive review”, but it still requires trademark holders to provide “proof of use” before they can add their marks to the Clearinghouse.
Without proof of use, companies will not be able to file Uniform Rapid Suspension complaints or defensively register their brands during new gTLD Sunrise periods.
The IP lobby and the GAC want this requirement scrapped. Any trademark of national effect should be enforceable using these rights protections mechanisms, they say.
One of the justifications is that some trademarks are obtained before the owner actually launches the product or service they pertain to.
If ICANN were to make these changes, there’s a good chance that bulk-registering bogus trademarks in loose jurisdictions may become an effective strategy for gaming the second level in new TLDs.
This has happened before, such as in .eu, and that wasn’t pleasant either.
Brand+Keyword
The current draft of the Applicant Guidebook only allows exact trademark matches into the Trademark Claims and Sunrise mechanisms.
But the the IP crowd (and, again, the GAC) thinks non-exact matches should be allowed in. In the .com space, the majority of cybersquatting nowadays is of course either a brand+keyword or a typo.
Millions are being needlessly spent on UDRP complaints over typos and brand+keyword domains, and the trademark lobby don’t want to risk having to spend even more.
But there could be implementation problems. Both types of variant could throw up lots of false positives during the Claims service, for example, creating conflicts where there aren’t any.
An automated system designed to scare off typosquatters could catch the generic domain goggles.tld as an infringement of Google’s trademark, to use an obvious example.
If brand+keyword Sunrise claims were allowed, holders of trademarks in generic terms could find themselves with a lucrative payday.
Any company that has a trademark on words such as “free”, “live”, “sexy” or anything that could act as a cool prefix, could have a field day during a Sunrise period.
Uniform Rapid Suspension
I understand a sticking point here continues to be the burden of proof required to make a URS case stick.
It’s currently “clear and convincing evidence”, but the IP lobby and the GAC want it reduced to “preponderance of evidence”, a lower burden.
To non-lawyers, the difference may seem trivial. Both standards are used in civil cases in many countries, but one’s a bit strong than the other.
“Preponderance of evidence” basically means “more likely true than not”, whereas “clear and convincing”… well, it’s a bit stronger than that.
The choice of burdens will have repercussions for years to come. Registrants in new gTLDs will know what they’re getting into, but if URS ever makes it into .com…
The Road to Singapore
It’s less than a month before ICANN’s next major meeting, and only a week until it plans to publish the next version of the Applicant Guidebook.
The ICANN board is due to meet face-to-face (and presumably in public) with the GAC on the first day of the meeting, June 19, but it seems that talks will be ongoing behind the scenes until then.
A great deal of progress has been made, but with complex issues still apparently unsettled (and there are more unresolved issues unrelated to trademarks) it’s little wonder that some are now wondering whether ICANN is as confident as it once was that June 20 is Guidebook Approval Day.

Interpol wants to join the GAC

Interpol plans to apply to join ICANN’s Governmental Advisory Committee as an observer, according to ICANN.
The news came in a press release this evening, detailing a meeting between ICANN president Rod Beckstrom and Interpol secretary general Ronald Noble.
The meeting “focused on Internet security governance and enhancing common means for preventing and addressing Internet crime”. Beckstrom said in the release:

We seek the active engagement of law enforcement in our multi-stakeholder community where all parties are welcome. We recognize Interpol as an important international leader in this field. We are very pleased by its expression of interest in joining the ICANN Governmental Advisory Committee as an observer.

The GAC already has about 20 members with “observer” status, which can be granted to any intergovernmental or treaty organization.
Also in attendance at the meeting in Lyons, France, was ICANN’s new chief of security, Jeff Moss, VP of government affairs Jamie Hedlund, and Alice Jansen of its Organizational Reviews unit.
Law enforcement has been trying to get a louder voice at ICANN for some time, and calls have grown in volume given the increasing use of domain names as tools to shut down crooks.
At ICANN’s recent meeting in San Francisco, Interpol’s top cop on the child abuse imagery beat, Michael Moran, launched a withering critique of what he saw as the industry’s failure to help police the web.
Moran called for a system to be put in place for law enforcement to more easily be able to shut down peddlers of such content and more easily track the abusers.

Poor nation support crucial to new TLD talks

Whether to provide discounts for new top-level domain applicants from poor countries has become a critical obstacle in the process of getting ICANN’s new gTLD program approved.
Not only are its policy-making bodies going through a bout of infighting over proposals to help developing nations, but it is also being seen as a “major political risk” to ICANN’s global credibility.
Sources say that the Governmental Advisory Committee is increasingly concerned that a lack of support for poorer nations could used to bash the gTLD program and discredit ICANN itself.
There are fears that the Group of 77 could use the perception that ICANN works primarily for the benefit of the developed world to push for more UN-based governmental control of the internet.
These concerns were apparently raised during the ICANN Board-GAC teleconference on Friday, and will continue to be discussed in the run-up to the Singapore meeting.
Merely applying for a new gTLD will cost a minimum of $185,000 in direct ICANN fees, potentially rising dramatically in the case of complex or contested applications.
That sum also excludes the many more hundreds of thousands of dollars required to create an application that meets ICANN’s stringent financial and technical stability demands.
Many have estimated that an application for a new gTLD could require an first-year outlay of easily over $1 million.
Unsurprisingly, this may exclude applicants from poorer nations, particularly non-profit and community-based initiatives.
There’s a worry that if support mechanisms are not in place for the first round of applications, culturally or commercially valuable IDN gTLDs will get snapped up by wealthy western companies.
Warning: More Acronyms Ahead
To come up with solutions to this problem, ICANN in April 2010 asked for what is now called the “Joint SO/AC Working Group on New gTLD Applicant Support” – JAS for short.
JAS was chartered by, and comprised of members of, the Generic Names Supporting Organization and the At Large Advisory Committee, two of ICANN’s policy bodies.
Earlier this month, JAS submitted its draft second milestone report (pdf) was submitted to the ICANN board. It’s more of a collection of ideas than a structured framework for applicant support.
It calls for, among other things, fees and financial commitments reduced by as much as three quarters for applicants from about 50 poor nations, if they can show they are (essentially) worthy and needy.
It also suggests that such applicants could have their requirements to support the new DNSSEC and IPv6 technologies from day one – which would raise start-up costs – eliminated.
Unfortunately, the GNSO and ALAC apparently had quite different expectations about what the JAS would produce, and since January the group has been working under a split charter.
Registries and registrars were (and are) worried that JAS was going too far when it recommended, for example, discounted application fees.
Because ICANN has priced applications on a cost-recovery basis, there’s a real concern that discounts for poor applicants will translate into higher fees for wealthier applicants.
Broadly, it’s an example of the usual tensions between commercial domain name industry stakeholders and other groups playing out through quite arcane due process/jurisdictional arguments.
For the last couple of weeks, this has manifested itself as a row about the fact that JAS submitted its report the report was submitted to the ICANN board before it was approved by the GNSO.
Mind The GAC
If it’s the case, as sources say, that the GAC is urgently pressing for applicant support measures to be available in the first round of new gTLD applications, this puts another question mark over ICANN’s ability to approve the Applicant Guidebook in Singapore a month from now.
The GAC “scorecard” of problematic issues has since November stated that ICANN should adopt the findings of the JAS.
But today the JAS is nowhere near producing a comprehensive solution to the problem. Its recommendations as they stand are also unlikely to attract broad support from registry/registrar stakeholders.
Many of its current suggestions are also highly complex, calling for ICANN to establish special funds, staggered payment or repayment programs and additional applicant background checks.
They would take time to implement.
There’s been some talk about the idea that ICANN could approve the Applicant Guidebook before the JAS work is complete, but I’m not sure how realistic that is or whether it would receive the GAC blessing.
If the GAC is worried that ICANN’s very legitimacy could be at risk if it goes ahead with the program before the developing world is catered for, we could be looking at another big roadblock.

VeriSign drops $150,000 on ICANN Singapore

VeriSign, which signed up for an unprecedented $500,000 sponsorship package for ICANN’s meeting in San Francisco, has spent a rather more modest amount for the June meeting.
The company is currently listed as a Platinum Elite sponsor for the Singapore meeting, which kicks off June 19. This tier has a list price of $150,000, though I believe ICANN’s prices are negotiable.
VeriSign’s two main registry services competitors, Neustar and Afilias, had already signed up for cheaper sponsorship tiers, with lower visibility.
It would be my guess that the company waited for its rivals to show their hands before deciding to how much it needed to spend to trump them.
The Singapore meeting may see the approval of the Applicant Guidebook for the new top-level domains program.
(UPDATE: Thanks to the reader who pointed out that ICANN will almost certainly vote to approve the renewal of VeriSign’s .net contract in Singapore.)
There are 19 sponsors for Singapore so far, but currently no takers for the two available top-tier Diamond packages, which are listed at $250,000.
The amount VeriSign coughed up for San Francisco is believed to have largely contributed to the speaking fees of former US president Bill Clinton.
ICANN expects to make about $1.2 million from its three fiscal 2011 meetings, which is less than the cost of a single meeting.

Still no new TLDs agreement with GAC

ICANN and its Governmental Advisory Committee have yet to resolve their differences over the new top-level domains program, putting a question mark over the current approval timetable.
In a joint statement released early this morning, following a teleconference on Friday, the ICANN board and GAC confirmed that their talks have not yet concluded.
But ICANN still thinks approval of the program’s Applicant Guidebook could come by June 20, the second day of the forthcoming Singapore meeting:

The latest discussion and ICANN Board and GAC agreement on the benefits of having a face-to-face meeting in Singapore pave the way to possible Board consideration of program approval on 20 June 2011.

This seems to serve as confirmation that the board and GAC will meet for a last-ditch attempt at compromise on June 19. ICANN has already moved around schedules to accommodate the meeting.
Outstanding areas of disagreement continue to include rights protection mechanisms for trademark holders and processes for governmental objections to controversial TLD applications.
Negotiations so far have comprised at least four days of face-to-face talks over the last few months, which had mixed results.
ICANN has given a lot of ground already, but it seems that it has not gone far enough for the GAC. Chair Heather Dryden said in the statement:

the GAC appreciates the time taken by the Board to discuss remaining issues on the call and looks forward to continued progress as a clear signal that the Board is committed to enabling the formulation of true community consensus in developing policy that is in the global public interest as well as increasing the overall accountability and transparency of the organization.

The current talks take place against the backdrop of the renewal of ICANN’s IANA contract with the US Department of Commerce and NTIA, which gives ICANN many of its powers.
Larry Strickling, head of the National Telecommunications and Information Administration, has publicly indicated that he may use the renewal as leverage to squeeze concessions from ICANN.
Two weeks ago, he said that he was “unclear” about whether June 20 was a realistic target for Guidebook approval.
Recently, Strickling also met with European Commissioner Neelie Kroes where they found common ground on new gTLDs and ICANN’s accountability and transparency goals.

African Union yanks .africa bid support, seeks registries

The African Union has called for registry operators to express their interest in managing the proposed .africa top-level domain.
It has also confirmed that it is not currently backing DotConnectAfrica’s longstanding bid to apply to ICANN to operate .africa.
DCA has for some time been touting its support from a number of African governments, including the AU, which is required for a geographic TLD bid to be approved by ICANN.
But the AU said in a statement last week:

The AU Commission was at some point approached by an organization now known as DCA seeking endorsement and support for in its bid to use of the domain name.
…
The AU Commission would like to hereby categorically state that it is not supporting any one individual or organization in this bid.

The statement glosses over the August 2009 letter from AU Commission chairman Jean Ping, which offers to aid DCA with its efforts to gain government support for .africa.
With its support for DCA no longer applicable, the AU yesterday issued its official call for Expressions of Interest from experienced registry operators:

DotAfrica will serve a community which spans over a large portion of region, therefore providing registrants with accrued possibilities for establishing their Internet presence. It is expected that the Africa small and medium size enterprises will greatly benefit from DotAfrica, as they thrive beyond their local markets to invade the regional and continental marketplace.

The EOI does not set out any guidance on what the AU expects to see in a proposal – it doesn’t even specify whether it’s looking for a sponsor or a back-end operator – it merely asks for audited financial statements and a potted corporate bio.
The deadline for the EOI is June 3.
The .africa bid has become fiercely political recently, with DCA throwing around accusations of corruption and back-room dealing.
Its outrage has been centered largely on an AU task force on .africa that was created last November, and its chairman, Nii Quaynor.
He is the registrant of dotafrica.org, which was previously used in a .africa bid that competed with DCA’s.
Other task force members are involved with AfTLD, the African ccTLD association that has also announced it is preparing a .africa bid.
In a blog post this week, DCA calls for the task force to be abandoned.

Does Obama endorse Whois privacy?

The US government today released its latest International Strategy For Cyberspace, and it seems to acknowledge privacy rights in domain name registration.
The 30-page document (pdf) envisions a future of the internet that is “open, interoperable, secure, and reliable” and “supports international trade and commerce, strengthens international security, and fosters free expression and innovation”.
It calls for the US and its international partners to set norms that value free speech, security, privacy, respect for intellectual property and (because this is America, remember) the right to self-defense.
Domain names get a mention, in a statement that could be read, without much of a stretch of the imagination, as support in principle for private Whois records:

In this future, individuals and businesses can quickly and easily obtain the tools necessary to set up their own presence online; domain names and addresses are available, secure, and properly maintained, without onerous licenses or unreasonable disclosures of personal information.

That’s open to interpretation, of course – you could debate for years about what is “unreasonable” – but I’m surprised Whois privacy merited even an oblique reference.
Most government and law enforcement statements on the topic tend to pull in the opposite direction.
The new strategy also seems to give ICANN – or at least the ICANN model – the Administration’s support, in a paragraph worth quoting in full:

Preserve global network security and stability, including the domain name system (DNS). Given the Internet’s importance to the world’s economy, it is essential that this network of networks and its underlying infrastructure, the DNS, remain stable and secure. To ensure this continued stability and security, it is imperative that we and the rest of the world continue to recognize the contributions of its full range of stakeholders, particularly those organizations and technical experts vital to the technical operation of the Internet. The United States recognizes that the effective coordination of these resources has facilitated the Internet’s success, and will continue to support those effective, multi-stakeholder processes.

NTIA calls for ICANN to “walk the walk”

A US National Telecommunications and Information Administration official today said ICANN needs to prove it can “walk the walk” when it comes to accountability and transparency.
Speaking on a panel at the inaugural Nominet .uk Policy Forum here in London today, NTIA associate administrator Fiona Alexander said it was time for ICANN to “up its game”
On a panel about regulatory systems for the internet, Alexander reiterated US support for the ICANN model, but said that ICANN board too often acts without the consensus of its stakeholders.
Quoting from speeches made by her boss, assistant secretary Larry Strickling, she said the US supports the December recommendations of ICANN’s Accountability and Transparency Review Team.
“The ICANN board has until June to implement these recommendations,” she said.
It wasn’t clear whether that was a slip of the tongue, or an indication that the NTIA plans to hold ICANN’s feet to the fire over its implementation timetable.
The Affirmation of Commitments calls for ICANN to “take action” on the ATRT report by June 30, but ICANN is planning a longer-term roll-out
It has some good reasons for tardiness. Adopting the ATRT-recommended changes to its relationship with the Governmental Advisory Committee, for example, will require more bandwidth than ICANN and the GAC have to offer before the June deadline.
“Governments are only going to want to get more involved, not less,” Alexander said.
The Obama administration has a lot of political capital tied up in the idea of “multistakeholderism” – it’s a model it proposes for other fora – but its would-be poster child, ICANN, has a habit of frequently looking more like a red-headed poster step-child.
“It’s time to up your game,” Alexander said of ICANN, “because this really is the model that we need to work.”